Squid3 - New GUI with sync, normal and reverse proxy

marcelloc

If sarg report was created by cron, then your cron is running.

When you run squid -k rotate by hand it works, so your squid is working.

If cron is running and squid is running, I have no idea why your logs are not rotating.

technical

sarg not creating auto reports (this strange)
if im use command like screen shot sarg generating a report
and i ll use for squid rotation command squid -k rotate -f /usr/local/etc/squid/squid.conf (it is not working) there are no rotate logs (really this strange to)

that is a my system log

Jun 25 00:00:14 squid[52049]: Squid Parent: child process 52389 started
Jun 25 00:00:03 php: : executing squid log rotate after sarg.
Jun 25 00:00:02 php: : Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and both action after sarg finish.

wtf is that :)

update : (i ll check that command for ssh it shows )

[2.0.3-RELEASE][root@firewall.local]/root(3): /usr/bin/nice -n20 /usr/local/etc/rc.d/squidGuard_logrotate
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory
tail: -: No such file or directory

marcelloc

Are you sure your install is not corrupted?

It looks like tail is missing and cron is not running/working.

technical

@marcelloc:

Are you sure your install is not corrupted?

It looks like tail is missing and cron is not running/working.

if cron is not works how to created that logs correct time ?

Jun 25 00:00:14 squid[52049]: Squid Parent: child process 52389 started
Jun 25 00:00:03 php: : executing squid log rotate after sarg.
Jun 25 00:00:02 php: : Sarg: force refresh now with -d date +%d/%m/%Y-date +%d/%m/%Y args, compress(on) and both action after sarg finish.

cjbujold

Where can I find the correct instructions on using squid 3 reverse proxy with HTTPS.

I been reading several forum entries and several seem to conflict. The situation is I have several HTTPS sites each with their own SSL certificate. Trying to find the best way to implement reverse proxy. Some forums seem to indicate that you can do it with one certificate and others say that you need an ssl certificate for each site. Tried a number of them and none seem to work.

I just want to know how to serve "easily" more than one 443 web site on more than one server using PFSense and Squid 3 reverse proxy for HTTPS. Is there an authoritative guide on this subject which gives step by step directions that actually works every time?

Thanks
cjb

marcelloc

with one extenal ip and an wildcard ssl you can publish as many sites you need with the same domain.

with one external ip and more then one ssl, you may need one port for each site.

diegoriera

Hi,

I config reverse proxy to Exchange, but on RPC over HTTP service show MISS/401. If redirect 443 port to exchange didn't have error.

Result test in https://www.testexchangeconnectivity.com

Additional Details
Attempting to ping RPC endpoint 6001 (Exchange Information Store) on server 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
The attempt to ping the endpoint failed.
Tell me more about this issue and how to resolve it

Additional Details
The RPC_E_ACCESS_DENIED error (0x5) was thrown by the RPC Runtime process.

marcelloc

Can you try with squid3-dev fetching missing sasl libs.

Squid 3.1 does not has http 1.1 support but squid3.3 has.

grassu

One more certificate question. Is it possible to use a SAN certificate instead of a wildcard certificate for the reverse proxy?

Thanks,
grassu

diegoriera

Marcelloc, I tryed use Squid3-dev, but had a problem to start squid.

pfSense php: /pkg_mgr_install.php: The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was '/libexec/ld-elf.so.1: Shared object "libgssapi.so.10" not found, required by "squid"'

diegoriera

marceloc,

Testei o Squid3-Dev, mas com ele ocorre um erro parecido.

Tentando realizar ping no ponto de extremidade RPC 6001 (Exchange Information Store) no servidor 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
Falha ao tentar fazer ping no ponto de extremidade.

Detalhes Adicionais
Erro RPC lançado pelo processo de Tempo de Execução RPC. Erro 1818 CallCancelled

Se faço um NAT direto para o Exchange não ocorre erro.

Tentando realizar ping no ponto de extremidade RPC 6001 (Exchange Information Store) no servidor 5a56cc6d-4eba-4f85-8b64-2e68abd4cbf7@domain.com.
Êxito ao fazer ping no ponto de extremidade.

Detalhes Adicionais
Status RPC Ok (0) retornado em 968 ms.

No Log aparece isso.

10.07.2013 18:32:57 207.46.14.63 TCP_MISS_ABORTED/200 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:27 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:26 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:23 207.46.14.63 TCP_MISS/200 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:23 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5
10.07.2013 18:32:23 207.46.14.63 TCP_MISS/200 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/Rpc/RpcProxy.dll? - 10.1.0.5
10.07.2013 18:32:20 207.46.14.63 TCP_MISS/401 https://mail.domain.com/rpc/rpcproxy.dll? - 10.1.0.5

Tikimotel

Please upload the pbi first before updating the package information. :'(

Beginning package installation for squid3-dev .
Downloading package configuration file... done.
Saving updated package information... done.
Downloading squid3-dev and its dependencies... 
Checking for package installation... 
 Downloading http://files.pfsense.org/packages/amd64/8/All/squid-3.3.8-amd64.pbi ...  could not download from there or http://files.pfsense.org/packages/amd64/8/All//squid-3.3.8-amd64.pbi.
of squid-3.3.8-amd64 failed!

Installation aborted.Backing up libraries... 
Removing package...
Starting package deletion for squid-3.3.8-amd64...done.
Removing squid3-dev components...
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Include file squid.inc could not be found for inclusion.
Deinstall commands... 
Not executing custom deinstall hook because an include is missing.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
Cleaning up... done.
Failed to install package.

Installation halted.

sparklyballs

@Tikimotel:

Please upload the pbi first before updating the package information. :'(

Beginning package installation for squid3-dev .
Downloading package configuration file... done.
Saving updated package information... done.
Downloading squid3-dev and its dependencies... 
Checking for package installation... 
 Downloading http://files.pfsense.org/packages/amd64/8/All/squid-3.3.8-amd64.pbi ...  could not download from there or http://files.pfsense.org/packages/amd64/8/All//squid-3.3.8-amd64.pbi.
of squid-3.3.8-amd64 failed!

Installation aborted.Backing up libraries... 
Removing package...
Starting package deletion for squid-3.3.8-amd64...done.
Removing squid3-dev components...
Tabs items... done.
Menu items... done.
Services... done.
Loading package instructions...
Include file squid.inc could not be found for inclusion.
Deinstall commands... 
Not executing custom deinstall hook because an include is missing.
Removing package instructions...done.
Auxiliary files... done.
Package XML... done.
Configuration... done.
Cleaning up... done.
Failed to install package.

Installation halted.

getting something similar for the 32bit version.

Downloading http://files.pfsense.org/packages/8/All/squid-3.3.8.tbz … could not download from there or http://ftp2.FreeBSD.org/pub/FreeBSD/ports/i386/packages-8.1-release/All/squid-3.3.8.tbz.
of squid-3.3.8 failed!

Tikimotel

The PBI version(s) was/were fixed yesterday evening (for me), I'm now running 3.3.8.

afbholly

Hi…I'm having the same problem with the latest Squid 3.3-Dev beta 3.3.8 pkg 2.1.2 . I've got a brand new 2.0.3-RELEASE (amd64) install and I get the following when I tried to install Squid yesterday like some of the other posters.

Beginning package installation for squid3-dev...
Downloading package configuration file... done.
Saving updated package information... done.
Downloading squid3-dev and its dependencies...
Checking for package installation...
Downloading http://files.pfsense.org/packages/amd64/8/All/squid-3.3.8.tbz ... could not download from there or http://ftp2.FreeBSD.org/pub/FreeBSD/ports/amd64/packages-8.1-release/All/squid-3.3.8.tbz.
of squid-3.3.8 failed!

Otherwise...love PFsense and a huge thank you to everyone who is working on this project!

gar2k

Good day to all! Help please!

2.0.3-RELEASE (amd64)
built on Fri Apr 12 10:27:15 EDT 2013
FreeBSD 8.1-RELEASE-p13

Squid3 and SquidGuard Installed. Everything works except for reverse proxy, if you turn off SquidGuard - revers proxy works fine, as soon as there is in the config Squid "redirect_program/usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf" reverse falls off. Squidguard finds sqerrore.php on the web server where was мapped reverse.
I'm sorry for my english.

mromero

Can someone confirm if the 3.38.PBI is still broken / fixed?

Any special steps to take when installing not to break anything?

I see it in the Packages now in my PFSENSE GUI but hesitant to install.

Thanks!

mromero

Looks like still broken. Installed and it complains about some ClamV file missing but I do not have antivirus enabled.

djnemo

I have a pfSense 2.0.3 Box Squid3 + SquidGuard was worked nice,
i removed squid3 and installed squid3-dev from package menu i download those 6 lib file to /usr/local/lib it seems squid-dev is running since i dont have any error in system log and service status is running,But nothing can pass via pfsense i have set it up as default gateway in my workstations but not website can browse !
ping is passing without problem.

i have this kind of error when trying ro restart the service or change configurations:


php: /status_services.php: The command '/usr/local/etc/rc.d/squid.sh stop' returned exit code '1', the output was 'squid: ERROR: Could not send signal 15 to process 6614: (3) No such process'

i didnt touch any routing,rule,nat setting they are all like default setting.

thanks

mromero

Would appreciate it if someone opens a new thread when this version of Squid is up and running as a package with no need to be mucking around with external libs and patches etc. ::)